Cybersecurity briefing — 2026-04-14

A critical vulnerability in Ninja Forms is being actively exploited right now, with thousands of attacks hitting WordPress sites in the last 24 hours alone.

• Malicious PDFs Enable Code Execution Across Windows and macOS
• Phishing Marketplace Takedown Cuts Supply but Leaves Stolen Credentials Active
• Mirax Malware Turns Infected Phones into Anonymized Fraud Infrastructure
• Basic-Fit Breach Exposes 1 Million Members’ Personal and Bank Data
• APT37 Shifts to Facebook Social Engineering to Deliver RokRAT Malware
• Correlating Signals Exposes Reachable Autonomous AI Agent on Windows Server
• Adobe Reader Zero-Day Uses Stealthy Fingerprinting Before RCE
• JanelaRAT’s Evolving Multi-Stage Attacks Sharpen Focus on Latin American Banks